Solved

Yahoo/bellsouth.net reports my sender as a possible fraud/spoof following an on-premises Exchange to Office 365 Exchange Cutover Migration

Posted on 2016-11-10
3
74 Views
Last Modified: 2016-11-22
Recently completed an on-premises Exchange to Office 365 hosted Exchange cutover migration. Everything went as advertised and the company is using hosted Exchange without issues. The on-premises Exchange server has been shut down since the migration. The one issue I'm having: When someone sends an email from the company domain to one of the employees' PERSONAL bellsouth.net account, the bellsouth.net account holder gets the email, but then gets another email saying (see graphic): This sender failed our fraud detection checks and may not be who they appear to be. I reviewed the DNS records for the company domain and found a legacy SRV mail protection record and a mail A record related to the on-premises Exchange server, which I have since deleted. But even after a day or so allowing for propagation, the problem persists. Thoughts?
yahoo-emailerr.JPG
0
Comment
Question by:tcianflone
  • 2
3 Comments
 
LVL 14

Accepted Solution

by:
Schnell Solutions earned 500 total points
ID: 41882722
Hello,

You are going on the good track. Because the problem is really related to anti spam checks and revisions, I believe that it is what you just reconfigured correctly: The ID Filtering / SPF that are validated with the TXT record in your DNS zone.

Additionally, like you stated, it usually takes from 0 to 3 days. However, some anti spam solutions store information locally for some additional time.

Try to check if there is a process (usually it is done online), where you can contact the destination domain messaging administrators, and complete any additional action to take you out from possible block lists in 'their systems'.
0
 
LVL 1

Author Comment

by:tcianflone
ID: 41886906
So, it's been a week now and this is still happening. The DNS zone looks fine to me, like every other Office 365 hosted Exchange service I have ever set up. And bellsouth.net is the ONLY email service complaining about it. Can anyone provide a link to where I can report this to AT&T email admins? That company is so huge, I can't imagine actually finding the right place to report something like this.
0
 
LVL 14

Expert Comment

by:Schnell Solutions
ID: 41888062
You can start here...

http://rbl.att.net/block_inquiry.html

There are many links for many tasks, i.e. Tools for administrators or mail systems whose messages has been blocked.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
Cloud-based technologies and services will continue to grow in popularity in 2017 thanks to the simple, scalable and cost-effective solutions they deliver. Here are three areas where cloud adoption is poised to really take off.
Office 365 is currently available in five editions. Three of them are for business use: Office 365 Business Essentials, Office 365 Business, and Office 365 Business Premium. Two of them are for home/personal use: Office 365 Home and Office 365 Perso…
how to add IIS SMTP to handle application/Scanner relays into office 365.

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question